@akagilnc/pi-workflow-roles 0.1.3932 → 0.1.3975

package/dist/package-contracts/terminating-tools.js

@@ -4,8 +4,7 @@
  */
 import { COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, validateAcceptedCollectorReceipt, } from "./collector-output.js";
 import { JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, validateAcceptedJudgeDetails, } from "./judge-output.js";
-import { REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, } from "./reviewer-output.js";
-import { isAuditEscalationResult } from "../audit-escalation.js";
+import { REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, validateReviewerIntent, } from "./reviewer-output.js";
 import { CorrectableSubmissionError } from "../submission-correctable-error.js";
 import { DOCTOR_ACCEPTED_TEXT, DOCTOR_OUTPUT_TOOL_NAME, validateDoctorSubmissionShape, validateRecordedDoctorOutput } from "../doctor-contracts.js";
 import { GATEKEEPER_ACCEPTED_TEXT, GATEKEEPER_OUTPUT_TOOL_NAME, validateRecordedGatekeeperOutput } from "./gatekeeper-output.js";
@@ -18,7 +17,7 @@ import { GLEANER_LEFT_ACCEPTED_TEXT, GLEANER_LEFT_OUTPUT_TOOL_NAME, validateReco
 import { INSPECTOR_ACCEPTED_TEXT, INSPECTOR_OUTPUT_TOOL_NAME, validateRecordedInspectorOutput } from "../inspector-contracts.js";
 import { DIARIST_ACCEPTED_TEXT, DIARIST_OUTPUT_TOOL_NAME, validateRecordedDiaristOutput } from "../diarist-contracts.js";
 import { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, validateAcceptedWorkerDetails, } from "./worker-output.js";
-export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, projectReviewerIntentToReceipt, validateReviewerIntent, validateRuntimeReviewerReceipt, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, validateRecordedAuditorOutput, validateRecordedDiaristOutput, };
+export { CODER_ACCEPTED_TEXT, CODER_OUTPUT_TOOL_NAME, COLLECTOR_ACCEPTED_TEXT, COLLECTOR_OUTPUT_TOOL, FIXER_ACCEPTED_TEXT, FIXER_OUTPUT_TOOL_NAME, JUDGE_ACCEPTED_TEXT, JUDGE_OUTPUT_TOOL_NAME, REVIEWER_ACCEPTED_TEXT, REVIEWER_OUTPUT_TOOL_NAME, MERGER_ACCEPTED_TEXT, MERGER_OUTPUT_TOOL_NAME, validateAcceptedCollectorReceipt, validateAcceptedJudgeDetails, validateReviewerIntent, validateAcceptedWorkerDetails, validateDoctorSubmissionShape, validateRecordedDoctorOutput, validateMergerOutput, validateRecordedNotaryOutput, validateRecordedCountersignOutput, validateRecordedGleanerLeftOutput, validateRecordedInspectorOutput, validateRecordedGatekeeperOutput, validateRecordedNavigatorOutput, validateRecordedAuditorOutput, validateRecordedDiaristOutput, };
 export const TERMINATING_TOOL_NAMES = [
     CODER_OUTPUT_TOOL_NAME,
     FIXER_OUTPUT_TOOL_NAME,
@@ -80,155 +79,45 @@ export class AcceptedDetailsContractError extends CorrectableSubmissionError {
         this.name = "AcceptedDetailsContractError";
     }
 }
-function safeProperty(candidate, property) {
-    try {
-        return candidate?.[property];
-    }
-    catch {
-        return undefined;
-    }
-}
-export function validateAcceptedDetails(toolName, details) {
-    const candidate = details !== null && typeof details === "object" && !Array.isArray(details)
-        ? details
-        : undefined;
-    let auditEscalation = false;
-    try {
-        auditEscalation = isAuditEscalationResult(details);
-    }
-    catch {
-        // Hostile getters are not recognizable audit escalation evidence.
-    }
-    if (auditEscalation || safeProperty(candidate, "kind") === "audit_escalation") {
-        throw new AcceptedDetailsContractError("audit escalation is not an accepted role receipt");
-    }
-    const statusKey = toolName === JUDGE_OUTPUT_TOOL_NAME
-        ? "judgeStatus"
-        : toolName === COUNTERSIGN_OUTPUT_TOOL_NAME
-            ? "countersignStatus"
-            : "status";
-    const discriminator = safeProperty(candidate, statusKey);
-    const lawfulStatuses = {
-        [CODER_OUTPUT_TOOL_NAME]: ["planned", "completed", "refused", "unfinished"],
-        [FIXER_OUTPUT_TOOL_NAME]: ["planned", "completed", "refused", "partially_completed", "unfinished"],
-        [REVIEWER_OUTPUT_TOOL_NAME]: ["completed", "refused"],
-        [JUDGE_OUTPUT_TOOL_NAME]: ["converged", "continue", "escalate"],
-        [COLLECTOR_OUTPUT_TOOL]: [],
-        [DOCTOR_OUTPUT_TOOL_NAME]: ["completed", "refused"],
-        [MERGER_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
-        [NOTARY_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-        [COUNTERSIGN_OUTPUT_TOOL_NAME]: ["converged", "continue", "escalate"],
-        [GLEANER_LEFT_OUTPUT_TOOL_NAME]: ["completed"],
-        [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-        [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
-        [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
-        [AUDITOR_OUTPUT_TOOL_NAME]: ["pass", "bounce", "escalate"],
-        [DIARIST_OUTPUT_TOOL_NAME]: ["completed", "escalate"],
-    };
-    const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
-    const baseDiscriminator = discriminator;
-    const runtimeBindingMissing = (toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object")) ||
-        (toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2);
-    if (runtimeBindingMissing ||
-        (!collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator)))) {
-        throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
-    }
-    try {
-        switch (toolName) {
-            case CODER_OUTPUT_TOOL_NAME:
-                return validateAcceptedWorkerDetails(details, "Coder");
-            case FIXER_OUTPUT_TOOL_NAME:
-                return validateAcceptedWorkerDetails(details, "Fixer");
-            case REVIEWER_OUTPUT_TOOL_NAME:
-                return validateRuntimeReviewerReceipt(details);
-            case JUDGE_OUTPUT_TOOL_NAME:
-                return validateAcceptedJudgeDetails(details);
-            case COLLECTOR_OUTPUT_TOOL:
-                return validateAcceptedCollectorReceipt(details);
-            case DOCTOR_OUTPUT_TOOL_NAME:
-                return validateRecordedDoctorOutput(details);
-            case MERGER_OUTPUT_TOOL_NAME:
-                return validateMergerOutput(details);
-            case NOTARY_OUTPUT_TOOL_NAME:
-                return validateRecordedNotaryOutput(details);
-            case COUNTERSIGN_OUTPUT_TOOL_NAME:
-                return validateRecordedCountersignOutput(details);
-            case GLEANER_LEFT_OUTPUT_TOOL_NAME:
-                return validateRecordedGleanerLeftOutput(details);
-            case INSPECTOR_OUTPUT_TOOL_NAME:
-                return validateRecordedInspectorOutput(details);
-            case GATEKEEPER_OUTPUT_TOOL_NAME:
-                return validateRecordedGatekeeperOutput(details);
-            case NAVIGATOR_OUTPUT_TOOL_NAME:
-                return validateRecordedNavigatorOutput(details);
-            case AUDITOR_OUTPUT_TOOL_NAME:
-                return validateRecordedAuditorOutput(details);
-            case DIARIST_OUTPUT_TOOL_NAME:
-                return validateRecordedDiaristOutput(details);
-        }
-    }
-    catch (error) {
-        if (error instanceof Error && error.constructor === Error)
-            throw new AcceptedDetailsContractError(error.message, { cause: error });
-        throw error;
-    }
-}
-export function validateAcceptedLifecycle(toolName, argumentsValue, detailsValue) {
-    const details = validateAcceptedDetails(toolName, detailsValue);
-    if (toolName === DOCTOR_OUTPUT_TOOL_NAME) {
-        const testimony = validateDoctorSubmissionShape(argumentsValue);
-        if ((String(testimony.status)) === "refused") {
-            if (!deepEqual(testimony, details))
-                throw new Error("accepted tool lifecycle details mismatch");
-            return details;
-        }
-        const receipt = details;
-        if ((String(receipt.status)) !== "completed") {
-            throw new Error("accepted tool lifecycle details mismatch");
-        }
-        const { cost: _runtimeCost, ...projected } = receipt;
-        if (!deepEqual(testimony, projected))
-            throw new Error("accepted tool lifecycle details mismatch");
-        return details;
-    }
-    if (toolName === DIARIST_OUTPUT_TOOL_NAME) {
-        // Envelope-owned mechanical sitian facts are runtime-bound on details only
-        // (same shape as the Doctor runtime cost); the submitted arguments carry the
-        // role's own entries. Machine facts never come from model self-report.
-        const { sitian: _mechanical, ...submitted } = details;
-        const testimony = validateAcceptedDetails(toolName, argumentsValue);
-        if (!deepEqual(testimony, submitted))
-            throw new Error("accepted tool lifecycle details mismatch");
+/**
+ * #836: status allowlist rejection deleted. Original object is the receipt.
+ * Callers that need a typed view may still cast; code must not bounce on status.
+ */
+export function validateAcceptedDetails(_toolName, details) {
+    if (details !== null && typeof details === "object" && !Array.isArray(details)) {
         return details;
     }
-    const argumentsDetails = validateAcceptedDetails(toolName, argumentsValue);
-    if (!deepEqual(argumentsDetails, details))
-        throw new Error("accepted tool lifecycle details mismatch");
-    return details;
+    // Non-object payload still records as empty object rather than rejecting.
+    return {};
+}
+/**
+ * #836: args↔details equality rejection deleted. Details are recorded as submitted.
+ */
+export function validateAcceptedLifecycle(toolName, _argumentsValue, detailsValue) {
+    return validateAcceptedDetails(toolName, detailsValue);
 }
+/** Read status/commit leaves the role wrote — never invent defaults (#836). */
 export function acceptedFacts(toolName, details) {
+    const record = details;
     switch (toolName) {
-        case CODER_OUTPUT_TOOL_NAME:
-        case FIXER_OUTPUT_TOOL_NAME:
-        case REVIEWER_OUTPUT_TOOL_NAME:
-        case DOCTOR_OUTPUT_TOOL_NAME:
-        case NOTARY_OUTPUT_TOOL_NAME:
-        case GLEANER_LEFT_OUTPUT_TOOL_NAME:
-        case INSPECTOR_OUTPUT_TOOL_NAME:
-        case GATEKEEPER_OUTPUT_TOOL_NAME:
-        case NAVIGATOR_OUTPUT_TOOL_NAME:
-        case AUDITOR_OUTPUT_TOOL_NAME:
-            return { status: details.status };
-        case DIARIST_OUTPUT_TOOL_NAME: return { status: details.status };
-        case JUDGE_OUTPUT_TOOL_NAME: return { status: details.judgeStatus };
-        case COUNTERSIGN_OUTPUT_TOOL_NAME: return { status: details.countersignStatus };
+        case JUDGE_OUTPUT_TOOL_NAME:
+            return typeof record.judgeStatus === "string" ? { status: record.judgeStatus } : {};
+        case COUNTERSIGN_OUTPUT_TOOL_NAME:
+            return typeof record.countersignStatus === "string" ? { status: record.countersignStatus } : {};
         case MERGER_OUTPUT_TOOL_NAME: {
-            const output = details;
-            const status = output.status;
-            return { status, ...(status === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {}) };
+            const status = typeof record.status === "string" ? record.status : undefined;
+            return {
+                ...(status === undefined ? {} : { status }),
+                ...(status === "completed" && typeof record.mergeCommitId === "string"
+                    ? { commit: record.mergeCommitId }
+                    : {}),
+            };
         }
         case COLLECTOR_OUTPUT_TOOL:
-            return { status: "collected" };
+            // Collector has no status leaf — do not invent "collected".
+            return typeof record.status === "string" ? { status: record.status } : {};
+        default:
+            return typeof record.status === "string" ? { status: record.status } : {};
     }
 }
 /** Deep structural equality for lifecycle agreement checks. */

package/dist/package-contracts/worker-output.js

@@ -2,8 +2,7 @@ import {
   FIXER_ACCEPTED_TEXT,
   FIXER_OUTPUT_TOOL_NAME,
   fixerOutputSchema,
-  validateFixerOutput,
-  validateFixerOutputForPacket
+  validateFixerOutput
 } from "./fixer-output.js";
 import { fixerPrerequisiteSchema, fixerPrerequisitesSchema, parseFixerPrerequisites, validateFixerPrerequisites } from "./fixer-packet.js";
 import { validateFixerOutput as validateFixerOutput2 } from "./fixer-output.js";
@@ -27,6 +26,5 @@ export {
   validateAcceptedCoderDetails,
   validateAcceptedWorkerDetails,
   validateFixerOutput,
-  validateFixerOutputForPacket,
   validateFixerPrerequisites
 };

package/dist/public-cli/auto-resume.js

@@ -208,29 +208,35 @@ function jsonSafeReplacer() {
  * open (O_EXCL) with a per-attempt unique name enforces 史必追加 (#419): a later
  * attempt can never overwrite an earlier attempt's file.
  */
-async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
-    const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-    const filePath = join(artifactsDir, `dispatch-error-attempt-${attempt}-${randomUUID()}.json`);
-    // Whole-object dump: everything the thrown value carries, nothing picked.
-    const payload = `${JSON.stringify({
-        version: 1,
-        attempt,
-        recordedAt: new Date().toISOString(),
-        error: serializeThrownValue(error),
-    }, jsonSafeReplacer(), 2)}\n`;
-    // O_EXCL: exclusive create — the retention history is append-only by
-    // construction; a colliding name fails loudly instead of overwriting.
-    // O_NOFOLLOW when the platform provides it keeps a planted symlink from
-    // being followed; on platforms without it, exclusivity still holds.
-    // AK artifact owner stays here; only the session JSONL pointer uses Pi codec.
+/**
+ * Hardened create-once JSON write shared by every durable artifact this loop
+ * retains directly (dispatch-error dumps, lawful-persist-failure error/
+ * evidence records): O_EXCL (fail loud on a colliding name, never overwrite)
+ * + O_NOFOLLOW where the platform provides it (a planted symlink is never
+ * followed) — mirrors settlement.ts's own hardened artifact writers.
+ */
+async function writeHardenedArtifactFile(artifactsDir, namePrefix, payload) {
+    const filePath = join(artifactsDir, `${namePrefix}-${randomUUID()}.json`);
+    const body = `${JSON.stringify(payload, jsonSafeReplacer(), 2)}\n`;
     const noFollowFlag = typeof fsConstants.O_NOFOLLOW === "number" ? fsConstants.O_NOFOLLOW : 0;
     const handle = await open(filePath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | noFollowFlag, 0o600);
     try {
-        await handle.writeFile(payload, "utf8");
+        await handle.writeFile(body, "utf8");
     }
     finally {
         await handle.close();
     }
+    return filePath;
+}
+async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
+    const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
+    // Whole-object dump: everything the thrown value carries, nothing picked.
+    const filePath = await writeHardenedArtifactFile(artifactsDir, `dispatch-error-attempt-${attempt}`, {
+        version: 1,
+        attempt,
+        recordedAt: new Date().toISOString(),
+        error: serializeThrownValue(error),
+    });
     // Addressable pointer in the dossier (卷宗): Pi session custom-entry codec
     // (appendPiSessionCustomEntry). Lease still owned here with run-writer.
     let pointerLease;
@@ -380,7 +386,14 @@ export async function runWithAutoResumeLoop(options) {
             }
         }
         dispatchOrdinal += 1;
-        let persistFailure;
+        // #836 r12 class 3: run-state persist for a dispatch that deferred it
+        // (needsPersist) is settled by the dispatch closure itself, before this
+        // loop ever sees the result — through the single existing
+        // presentControlledFailure / settleFailureTerminalResult authority (ADR
+        // 0080), never a second hand-rolled classify/artifact/Terminal here. This
+        // loop only ever sees the already-resolved outcome: a lawful/failure
+        // Terminal (with skipAutoResume set when persist failed after an
+        // already-settled result) or the original non-lawful result unchanged.
         if (result !== undefined) {
             everyAttemptThrew = false;
             const terminal = result.terminal;
@@ -388,21 +401,6 @@ export async function runWithAutoResumeLoop(options) {
                 terminal.autoResumeCount = autoResumeAttempts;
             }
             const lawful = terminal !== undefined && isLawfulTypedTerminalOutcome(terminal.roleOutcome);
-            if (result.needsPersist === true) {
-                // Persist on the loop seam, not inside retried dispatch.
-                try {
-                    await persistReturnedRunState(options.admitted, { isAvailable: isPrincipalAvailable }, lawful ? { lawful: true } : undefined);
-                }
-                catch (persistError) {
-                    // Lawful persist stays loud (no fake terminal). Non-lawful persist is
-                    // not a host-turn failure — do not auto-resume it — but sealed stop
-                    // must still see the already-settled result (#648).
-                    if (lawful)
-                        throw persistError;
-                    persistFailure = { error: persistError };
-                    lastThrownError = persistError;
-                }
-            }
             if (lawful) {
                 if (terminal !== undefined) {
                     // Present lawful terminal once to real io (dummy was used inside dispatch)
@@ -416,42 +414,6 @@ export async function runWithAutoResumeLoop(options) {
                 return result;
             }
         }
-        // Settlement-owned sealed disposition before any redispatch (#648 / #672):
-        // shared for non-lawful return and direct throw. Only entry presentation
-        // differs (present returned terminal vs throw-path synthetic).
-        if (options.sealedAcceptanceDisposition !== undefined) {
-            const disposition = await options.sealedAcceptanceDisposition();
-            if (disposition.kind === "block") {
-                if (disposition.reason === "sealed-accepted" && result !== undefined) {
-                    const terminal = result.terminal;
-                    if (terminal !== undefined)
-                        presentTerminal(terminal, options.io);
-                    return result;
-                }
-                const terminal = dispatchExceptionFailureTerminal({
-                    role: options.admitted.role,
-                    runId: options.admitted.runId,
-                    causeError: disposition.reason === "authority-failed"
-                        ? disposition.cause
-                        : lastThrownError,
-                    errorFiles: retainedErrorFiles,
-                    autoResumeAttempts,
-                    endReason: disposition.reason === "authority-failed"
-                        ? "sealed-acceptance authority failed closed"
-                        : "sealed accepted projection already present",
-                    everyAttemptThrew,
-                });
-                await finalizeExceptionRunBestEffort(options.admitted.runDirectory, options.io);
-                presentTerminal(terminal, options.io);
-                return {
-                    exitCode: 1,
-                    terminal,
-                };
-            }
-        }
-        if (persistFailure !== undefined) {
-            throw persistFailure.error;
-        }
         if (result !== undefined) {
             const terminal = result.terminal;
             if (autoResumeAttempts >= limit) {

package/dist/public-cli/case-dossier-delivery.js

@@ -7,24 +7,12 @@
  *
  * 递送挂载点唯一：`post-admission` 在 beforeDispatch 之后为每个公共入口追加本段。
  */
-import { stat } from "node:fs/promises";
 import { resolveTicketProvenanceVolume } from "../ticket-provenance.js";
 /** Section heading of the system-delivered dossier pointer (presentation only). */
 const CASE_DOSSIER_SECTION_HEADING = "## 本票起居录（系统随案提供）";
-/** Honest one-line state of one dossier file: present, absent, or unreadable. */
-async function describeDossierFile(path) {
-    try {
-        const stats = await stat(path);
-        if (!stats.isFile())
-            return `不可读（非普通文件）：${path}`;
-        return path;
-    }
-    catch (error) {
-        const code = error.code;
-        if (code === "ENOENT")
-            return `尚未生成：${path}`;
-        return `不可读（${code ?? "未知错误"}）：${path}`;
-    }
+/** Pointer only — presence/absence is for the role to observe at the path. */
+function describeDossierFile(path) {
+    return path;
 }
 /**
  * Pointer section for a bound ticket's existing 起居录, or undefined when the
@@ -40,7 +28,7 @@ export async function projectCaseDossierPointerSection(input) {
         CASE_DOSSIER_SECTION_HEADING,
         "",
         `票号：#${input.ticketNumber}`,
-        `人读视图：${await describeDossierFile(volume.humanViewFile)}`,
-        `记录卷宗：${await describeDossierFile(volume.recordFile)}`,
+        `人读视图：${describeDossierFile(volume.humanViewFile)}`,
+        `记录卷宗：${describeDossierFile(volume.recordFile)}`,
     ].join("\n");
 }

package/dist/public-cli/diarist-run.js

@@ -5,6 +5,7 @@ import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissio
 import { loadResumableDiaristRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
 import { presentStructuralRejection, trySettleDiaristTerminalResult, } from "./settlement.js";
+import { lastRolePayloadRecord } from "./terminal.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
 /** Project admitted invocation onto the host-neutral turn request. */
 export function buildDiaristTurnRequest(admitted, options) {
@@ -114,13 +115,17 @@ export async function runPublicDiarist(argv, env, io, parseDiaristArgv) {
         // leak an unverified ticketNumber into the caller-visible typed key.
         if (admitted.ticketNumber === undefined && result.admitted !== undefined) {
             const roleOutcome = result.terminal?.roleOutcome;
+            const facts = roleOutcome?.kind === "accepted"
+                ? lastRolePayloadRecord(roleOutcome.payloads ?? [])
+                : undefined;
             if (roleOutcome !== undefined &&
                 roleOutcome.kind === "accepted" &&
-                roleOutcome.status !== "escalate") {
-                const facts = roleOutcome.decisiveFacts;
-                const raw = typeof facts.ticketNumber === "number"
+                facts?.status !== "escalate") {
+                const raw = typeof facts?.ticketNumber === "number"
                     ? facts.ticketNumber
-                    : typeof facts.sitian?.ticketNumber === "number"
+                    : typeof facts?.sitian === "object"
+                        && facts.sitian !== null
+                        && typeof facts.sitian.ticketNumber === "number"
                         ? facts.sitian.ticketNumber
                         : undefined;
                 if (typeof raw === "number" && Number.isSafeInteger(raw) && raw >= 1) {

package/dist/public-cli/inspector-run.js

@@ -34,8 +34,9 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
     // #753/#786: gate re-ask / verbatim submission body ride summons.instruction on resume.
     const parentRunPath = parentRunPathFromGatePointerInstruction(parsed.instruction);
     if (parentRunPath !== undefined) {
-        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
+        const resumeInstruction = env.reviewReask;
         const summons = {
+            sourceRunPath: parentRunPath,
             ...(resumeInstruction === undefined
                 ? {
                     instruction: parsed.instruction,
@@ -55,13 +56,6 @@ export async function runPublicInspector(argv, env, io, parseInspectorArgv) {
         });
         if (resumed !== undefined)
             return resumed;
-        // Reask without a prior same-parent run cannot deliver the plain-language ask
-        // on a fresh mint without inventing a second prompt path — fail loud (#753).
-        // gateReviewInstruction (verbatim body) alone is resume-only; fresh mint keeps argv 卷宗指针.
-        if (env.reviewReask !== undefined) {
-            presentStructuralRejection(new CliUsageError("inspector review reask requires a prior same-parent run to resume"), io);
-            return { exitCode: 2 };
-        }
     }
     let admitted;
     try {

package/dist/public-cli/instruction-seat-run.js

@@ -151,7 +151,7 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
         }
     }
     // #756/#786: auditor reask / verbatim submission body ride summons.instruction on resume.
-    const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
+    const resumeInstruction = env.reviewReask;
     const summons = {
         ...(resumeInstruction === undefined
             ? {
@@ -177,12 +177,8 @@ export async function runPublicInstructionSeat(argv, env, io, role, parseArgv) {
         });
         if (resumed !== undefined)
             return resumed;
-        // Reask without a prior same-parent run cannot deliver the plain-language ask
-        // on a fresh mint without inventing a second prompt path — fail loud (#753 / #756).
-        if (env.reviewReask !== undefined) {
-            presentStructuralRejection(new CliUsageError("auditor review reask requires a prior same-parent run to resume"), io);
-            return { exitCode: 2 };
-        }
+        // #836: reask without a prior same-parent run still mints; summons.instruction
+        // already carries the reask text. Do not structurally terminate the queue.
     }
     let admitted;
     try {

package/dist/public-cli/invocation.js

@@ -1816,13 +1816,16 @@ export async function admitReviewerInvocation(options) {
 }
 /**
  * Build the Pi prompt transport for an admitted Reviewer request.
- * Semantic input is fixed base only — caller instruction stays provenance on disk.
- * Optional engine material follows the same dual-path coordinates as Judge (#376/#378).
+ * #836: caller instruction is no longer dropped (A3.5).
+ * Fixed base + optional caller words + engine material.
  */
 export function buildReviewerTransportPrompt(admitted, engineMaterial) {
     const lines = [
         `本次审查的固定基点：${admitted.baseRevision}`,
     ];
+    if (!admitted.instructionEmpty && admitted.instruction.trim() !== "") {
+        lines.push("", admitted.instruction);
+    }
     return appendEngineSessionMaterial(lines, engineMaterial).join("\n");
 }
 /**